$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa File: a455dd01-9d1c-3f67-be86-99d30a672de5.roa (raw, json) Hash identifier: bVZyX9WEYtBENUSqVU7/1SG9U9aVcosmBUYXIsPJev0= Subject key identifier: FF:F6:A3:63:65:FD:07:E5:D7:37:EE:D9:A9:5B:F0:1F:D2:2F:B4:8A Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA7884DA31C9243DFE54B5180 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 23.90.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4d:a3:1c:92:43:df:e5:4b:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ed1b9840-b6c6-45a7-8bb0-75922f4407f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:29:6d:f5:ae:e2:58:88:23:58:d1:92:33:ca: fe:6b:0d:d6:ac:a5:44:ab:95:64:9c:dc:e5:e4:55: c5:f6:75:ed:41:c9:7b:88:d1:a9:b4:04:ba:21:ae: cf:fe:2b:b3:2b:56:1f:1e:49:f3:73:ae:18:14:c6: 1e:60:ea:d5:92:fd:2a:89:8f:81:e5:89:e4:01:35: 05:0b:16:f5:63:d8:6d:59:2e:14:11:a8:60:d2:6f: cf:65:d6:e8:aa:ef:53:05:b5:d5:9a:06:6d:00:71: 68:92:7c:28:9f:04:c9:38:51:fa:12:65:65:57:d3: eb:3c:36:7f:95:b3:a1:db:c1:cc:b1:db:7b:49:15: 83:b9:cf:92:5f:54:a7:98:5b:1d:93:21:f1:79:2e: e7:38:38:af:8d:1c:cc:1d:fe:c6:d1:8b:00:9c:64: 4c:25:3f:a9:aa:a4:af:5d:2a:71:c8:c4:b2:71:27: 82:6c:16:eb:df:bd:40:47:5b:2e:04:ce:44:90:12: 92:56:0d:2d:95:75:f5:fc:c1:28:79:23:38:9b:b4: bc:b0:de:08:8a:fc:f3:19:86:e7:3d:ea:36:41:89: 66:60:ba:98:64:b4:4e:4d:d1:93:ed:b4:61:d4:92: dd:fe:e2:81:b8:bb:00:67:e8:3e:ab:db:36:67:4c: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:A3:63:65:FD:07:E5:D7:37:EE:D9:A9:5B:F0:1F:D2:2F:B4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:34:4d:bd:85:ec:c7:53:9b:5c:d3:40:e8:c3:76:ad:e6:94: 5c:aa:f0:2f:ab:22:f3:0b:f5:84:e7:8d:c9:0a:9b:80:06:6c: 6e:9f:2b:29:c2:10:ec:96:24:bf:de:04:dc:22:60:c2:cf:93: 0e:4a:91:13:45:46:79:7d:64:54:b3:b1:45:33:4e:e0:2b:e0: 04:ec:f8:39:d8:a9:bb:d6:1a:da:e8:51:95:f5:ec:ea:06:b4: 41:7d:4f:17:e1:b1:7d:61:81:05:86:81:d1:e4:76:4b:9c:d2: 52:4e:58:ca:f5:9d:63:da:a8:7d:ef:16:a6:54:31:31:5e:e7: fe:49:14:93:e4:22:18:f5:99:01:fc:28:b6:92:f4:3b:90:64: ae:f1:64:d7:68:c8:02:ab:79:43:08:c5:fd:02:c2:d0:8f:3b: 55:97:ca:5b:a5:99:53:b6:0d:3f:29:2b:15:91:bd:d8:a2:25: b5:15:f0:56:d2:b0:f8:ce:51:90:0c:2d:1e:c3:49:20:6e:23: 0c:d1:4f:31:ca:22:c3:4c:d1:a5:19:6a:7f:19:96:00:d4:1f: 7c:32:d4:bf:87:8d:0d:78:3d:1f:72:0a:e1:53:2e:d7:c5:7e: 62:6d:4c:7d:41:60:85:eb:7a:42:32:52:47:d1:8c:93:7b:dc: 46:fc:48:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE2jHJJD3+VLUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWQxYjk4NDAtYjZjNi00NWE3LThiYjAtNzU5MjJmNDQwN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgylt9a7iWIgjWNGSM8r+aw3WrKVEq5VknNzl 5FXF9nXtQcl7iNGptAS6Ia7P/iuzK1YfHknzc64YFMYeYOrVkv0qiY+B5YnkATUF Cxb1Y9htWS4UEahg0m/PZdboqu9TBbXVmgZtAHFoknwonwTJOFH6EmVlV9PrPDZ/ lbOh28HMsdt7SRWDuc+SX1SnmFsdkyHxeS7nODivjRzMHf7G0YsAnGRMJT+pqqSv XSpxyMSycSeCbBbr371AR1suBM5EkBKSVg0tlXX1/MEoeSM4m7S8sN4IivzzGYbn Peo2QYlmYLqYZLROTdGT7bRh1JLd/uKBuLsAZ+g+q9s2Z0xEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/2o2Nl/Qfl1zfu2alb8B/SL7SKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTQ1NWRkMDEtOWQxYy0z ZjY3LWJlODYtOTlkMzBhNjcyZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA0Tb2F7MdTm1zTQOjDdq3mlFyq8C+rIvML9YTnjckKm4AGbG6fKynC EOyWJL/eBNwiYMLPkw5KkRNFRnl9ZFSzsUUzTuAr4ATs+DnYqbvWGtroUZX17OoG tEF9TxfhsX1hgQWGgdHkdkuc0lJOWMr1nWPaqH3vFqZUMTFe5/5JFJPkIhj1mQH8 KLaS9DuQZK7xZNdoyAKreUMIxf0CwtCPO1WXylulmVO2DT8pKxWRvdiiJbUV8FbS sPjOUZAMLR7DSSBuIwzRTzHKIsNM0aUZan8ZlgDUH3wy1L+HjQ14PR9yCuFTLtfF fmJtTH1BYIXrekIyUkfRjJN73Eb8SEM= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:36 2026 by rpki-client